Category: Security

• Oauth-plugin

  Rails plugin for OAuth

• Open Id Authentication

  Easily add OpenID authentication to your app.

• OpenID Consumer

  Allows you to use OpenID authentication and profile exchange.

• openid_enabled

  A plugin that makes openid super simple.

• open_id_simplified

  A simple way to OpenID-enable an application without 'regular' user accounts.

• Persistent Cookie Authentication

  A generator that creates an authentication system with persistent cookie management for a Rails app

• Phonemic Passwords

  Used to create random passwords that are somewhat memorable for people. Uses random phonemes along with some knowledge of vowels, consonants, dipthongs and whether they should not come first or last in an English word

• Rails xss

  A plugin for rails 2.3 apps which switches the default to escape by default

• ReCaptcha

  ReCaptcha helpers for Rails apps

• redpill_access_control

  Context aware access control

• Remote forgery protection

  Rails plugin that automatically adds authenticity token to Ajax request

• Restful-authentication

  Generates common user authentication code for Rails/Merb, with a full test/unit and rspec suite and optional Acts as State Machine support built-in.

• RESTful_ACL

  A Ruby on Rails plugin that provides fine grained access control to RESTful resources in a Ruby on Rails 2.0+ project.

• RoleRequirement

  Role based security for acts_as_authenticated, without the mess

• Safe ERB

  Safe ERB checks if the string written by “<%= %>” in your rhtml template is escaped correctly and raises an error if it is not escaped, which will significantly reduce the possibility of putting cross-site scripting vulnerability into your web application.

• Safe Record

  Safe Record is a Rails plugin to detect potential SQL injection
  vulnerabilities with the taint mechanism of Ruby.

• Safety Net

  Safety Net prevents Rake and TestUnit from deleting the test database if it has the same name as the development or production database.

• Sanction

  A role based permissions management system designed to have an intuitive and useful API making an authorization system easy and painless. (Even Fun!)

• SanitizeParams

  SanitizeParams is a small XSS filter plugin.

• secure-action-plugin

  Rails plugin for preventing assumed-logged-in attacks.